By replacing the traditional plastic badge with the smartphone, mobile access control brings building entry into the modern era. Combining NFC access control, Bluetooth / BLE access control and digital badges delivers a seamless user experience, backed by rigorous encryption standards.
What is mobile access control?
Mobile access control means using a smartphone as a credential instead of a physical card or badge. A digital badge, also called a virtual badge, is an encrypted digital credential stored in an app or in the phone’s wallet (Apple Wallet, Google Wallet). When the user reaches the door, the smartphone communicates by radio with the wall-mounted reader. The reader authenticates the virtual badge before passing the information on to the access control panel, which grants or denies access in a fraction of a second.
How does smartphone access control work?
A smartphone doesn’t open every door the same way. Depending on the read range, the type of access point and the required security level, a site combines several communication modes and can add an extra layer of authentication. Here is what each one brings day to day.
NFC: contactless, digital badging for everyday use
NFC (Near Field Communication) access control operates at 13.56 MHz, with a range of less than 10 cm. The phone acts like a contactless badge: the user holds the device close to the reader to open the door. This deliberate gesture makes the intent to enter clear and prevents unintentional openings. It is well suited to lobbies, offices and sensitive rooms.
Bluetooth (BLE): the virtual badge for hands-free access
Bluetooth / BLE (Bluetooth Low Energy) access control uses the 2.4 GHz band. Its range can reach several tens of metres depending on the environment. It is a good fit for car park barriers, logistics areas and accessible entrances for people with reduced mobility, where users pass through without handling their phone. For a detailed comparison of these first two technologies, the article NFC vs Bluetooth: understanding the differences covers range, data rate and use cases.
QR codes: temporary access for guests
For visitors, contractors or delivery drivers, a QR code sent by email or messaging app provides temporary access, with no app to download. A rotating QR code, renewed at set intervals, prevents it from being duplicated.
Biometrics and PIN codes: a second factor
By requiring the user to unlock their phone (fingerprint, facial recognition or PIN code), the smartphone ensures that only the right person can open the door. This step blocks any access attempt if the device is lost or stolen. Alternatively, a site can prioritise speed by choosing Express Mode, which lets users pass without unlocking the screen. Each site can therefore fine-tune its setup to strike the right balance between stronger security and smooth traffic flow.
At reader level, biometrics are strictly regulated in Europe: the GDPR (and the CNIL, the French data protection authority) requires users to keep their own biometric data, which cannot be stored in the access control panel or on its associated server. Biometrics therefore act as a second factor: the reader extracts the data from the badge presented and compares it with the fingerprint placed on the biometric sensor.
From key to smartphone: the evolution of access control
Access control has gone through several generations of credentials. The mechanical key was followed by the contact key, fitted with pins that are held against an area of the reader to exchange data, and then by the infrared key, pointed at the reader to open the door. RFID then took over, in two families: 125 kHz, now obsolete, followed by 13.56 MHz, still in use today, whose most advanced technology is DESFire®. The smartphone, with NFC and Bluetooth (BLE), represents the next generation.
On smartphones, the NFC chip opened up to developers at two different speeds. As early as 2013, Android allowed developers to use the chip to bring new features to users. Apple long reserved it for its own Apple Wallet, until the European Digital Markets Act required it to make the chip available to all developers.
This opening allows security software publishers and reader manufacturers to rely on the iPhone’s NFC chip, including its Secure Element, to store access keys. Meanwhile, badges stored in Apple Wallet rely on the ECP2 protocol (Enhanced Contactless Polling): the reader must be certified by Apple. At LiNEGUARD, the Line Nano Prox and Line Ultra Keypad readers have obtained ECP2 certification and support Express Mode: users pass without unlocking their iPhone or opening an app, including with an Apple Watch.
Benefits of digital badges over plastic cards
Compared with conventional RFID badges, switching to mobile access control brings operational, financial and security benefits.
| Traditional badge | Digital badge | |
| Access rights management | → Physical printing, local programming and hand delivery. → Uncertain recovery when a badge is lost or an employee leaves. |
→ Remote assignment and revocation via the cloud, with no physical handover. Access rights sent directly to the smartphone.* |
| Security and cloning risk | → Risk of duplication with low-frequency (125 kHz) or poorly encrypted cards, which transmit data in the clear. | → Encrypted keys (AES-128), isolated in the phone’s Secure Element. Over-the-air copying is extremely difficult. |
| Costs and CSR | → Recurring purchase of plastic cards, reissue costs and ongoing logistics. | → No more plastic cards, lighter logistics and less plastic waste. |
*Digital access control can follow two approaches. In a proprietary solution, such as LiNEGUARD Access, the smartphone sends the user’s phone number to the reader during the exchange. This number is forwarded to the access control panel, which processes it like any other badge ID number. In a more open solution, the smartphone emulates a DESFire® badge using its NFC chip, and the exchange with the reader is governed by the Apple ECP2 standard.
LiNEGUARD solutions for mobile access control
To make the move to digital credentials a success, LiNEGUARD relies on a new generation of readers designed to combine high security with ease of use. Equipped with NFC and Bluetooth (BLE), the devices include a Secure Element that encrypts every exchange and eliminates the risk of copying. To deliver a seamless smartphone experience, the Line Nano Prox and Line Ultra Keypad readers are Apple ECP2 certified, enabling instant access from Apple Wallet.
On the infrastructure side, the range offers full interoperability through support for the market’s universal protocols (Wiegand, OSDP v2) as well as the SSCP protocol, for which the SPAC Alliance recently awarded Bouclier 3 level certification to the Line Ultra Prox and Line Ultra Keypad models. The LiNEGUARD Access app and LiNEGUARD Studio software then support the transition: each site moves at its own pace, and physical badges and smartphones coexist throughout the migration.
Tailored support for your move to digital credentials
Upgrading a security infrastructure and adopting mobile access control doesn’t require a major migration project: switching from physical badges to digital badges is done simply by configuring the reader. An access control system is built on three components (badge, reader and control panel), and LiNEGUARD readers are designed to adapt to both of the links between them.
Between the reader and the control panel: a common language
LiNEGUARD readers support the market’s common protocols (Wiegand, OSDP and SSCP) and therefore connect to the vast majority of access control panels. Renewing a fleet of readers means you don’t have to change your control panel or redo the existing wiring.
Between the badge and the reader: keeping the badges already in use
On the badge side, the readers read ISO 14443 A and B credentials, including the entire MIFARE® family designed by NXP. Badges already issued to users therefore remain usable and can coexist with virtual badges on smartphones.
This continuity relies on the badge profiles in LiNEGUARD Studio: the administrator enters the technology and encryption keys of the badges already in circulation, then sends this configuration to the reader. A single reader can thus handle several badge families in parallel.
Mobile, enabled when the site is ready
Every LiNEGUARD reader comes with built-in Bluetooth (BLE). A site can start with a reader in CSN mode or secure mode, then open its access points to smartphones later using an activation badge, with no break in security. This choice is never set in stone: it can be changed as usage evolves. Activating digital badges takes four steps:
- Install a reader in CSN mode.
- Present the mobile activation badge to the reader, which enables NFC and Bluetooth.
- The administrator enters users’ phone numbers in the access control system.
- Users sign in with their phone number in the LiNEGUARD Access app, where they find all their access rights.
Rights management therefore stays centralised in the existing system, with no physical badge handover.
Mobile access control combines the flexibility of the smartphone with a high level of security to modernise everyday building management. On every LiNEGUARD reader, made in France, physical badges, NFC and Bluetooth work side by side: the move to virtual badges happens at each site’s own pace.
Through this evolution, access control is now built directly into the everyday service apps people rely on. By bringing space booking and door unlocking together on a single platform, this convergence simplifies daily use while shaping truly smart, autonomous and connected buildings.
Frequently asked questions (FAQ)
Do I need to replace my entire installation to switch to mobile?
No. LiNEGUARD readers integrate with existing control panels thanks to their multi-protocol compatibility (SSCP, OSDP v2, Wiegand), so you can upgrade your security system step by step, without complex rewiring.
What’s more, your investment is future-proof: a device initially deployed to read physical badges only (CSN or PRESET configurations) can be upgraded to mobile access control at any time. NFC and Bluetooth features are simply enabled on site using an activation badge, with no need to replace the reader and no break in security.
Can physical badges and smartphones be used on the same reader?
Yes. LiNEGUARD readers are hybrid: they simultaneously handle physical cards from the MIFARE® family (including DESFire® EV2 and EV3) as well as NFC and Bluetooth smartphone connections.
How is data protected on the phone?
Virtual credentials are encrypted with AES-128 and stored in the smartphone’s dedicated hardware security component (Secure Element). For optimal protection, LiNEGUARD readers support the ECP2 standard required by Apple, ensuring highly secure, encrypted exchanges when using Apple Wallet or the LiNEGUARD Access app. With LiNEGUARD Access, the smartphone uses NFC or Bluetooth (BLE) to send the user’s phone number to the reader, which then forwards it to the control panel as if it were a badge number. In every case, this end-to-end encryption eliminates any risk of radio interception and cloning.
Is an internet connection needed for the smartphone to open the door?
No. Validation takes place through short-range radio communication between the smartphone and the wall-mounted reader. No Wi-Fi or mobile network connection is needed at the door, which makes it ideal for basements, car parks and remote areas.
Does the phone still work if the battery is dead?
On iPhone, Express Mode relies on a hardware power reserve that allows certain emergency access to be validated even when the phone’s battery has run out. This feature depends on the phone model.
